iVe Feature Spotlight: Blending Data from Two ECUs in One Case

In some instances, a particular vehicle will have not one but two iVe-supported ECUs. Examples of such a situation could include many Ford and GM vehicles, as well as the newly supported Mercedes COMAND systems that entail acquisition of two separate hardware components.

What if an investigator wanted to analyze data from a vehicle’s separate, supported ECUs in one case? Well, beginning with version 1.12.4, users have just such an option, and this blog entry will focus on how the process works.

For purposes of this example, we have already acquired a GM HMI module. When viewing the case in the main workspace window, note that an ‘Add’ button is displayed in the upper left for the other ECU that MAY potentially be included in the vehicle – in this case, an OnStar module.

Note: The presence of the ‘Add’ button does not necessarily mean with absolute certainty that the other ECU is included in the vehicle. Keep in mind that in some instances the original vehicle owner may have had multiple system options to choose from at build time.

To add the other ECU to the case, select the ‘Add’ button, and the acquisition wizard opens to the ‘Configure’ screen. On the ‘Configure’ screen, simply select the acquisition type (i.e., physical, logical, or import), and proceed as with any other acquisition.

After the second ECU has been added to the case, a second green checkmark is displayed where the ‘Add’ button was previously seen, and the two ECUs are displayed under separate nodes in the ‘Systems’ section tree.

Whenever a second ECU is added to a case, a ‘Partial Acquisitions’ subfolder is created in the case folder (as shown above). Within the ‘Partial Acquisitions’ subfolder, iVe creates backup files of the separate ECU acquisitions.

Wondering if it is possible to tell where a particular item came from after data from two ECUs has been blended together? Not to worry. To make this determination go to the ‘Content’ section grid, right-click the item in question, select ‘Show Source File(s),’ and click on the path that appears.

When the user clicks the path, the workspace switches to the ‘Systems’ section, and the source file’s folder is highlighted in the tree, indicating which of the two ECUs is the source for the parsed content.

It is hoped that iVe’s new functionality for merging data from two supported ECUs into one case can prove highly useful in relevant instances. Not only does this merging option save time from having to run separate searches on two ECUs, but it also allows for combining items in iVe’s timeline, tags, and reports.

If you have not already done so, upgrade your copy of iVe today by visiting our support page.

Success! Your request has been submitted.

If you have any further questions, you can email us directly at:info@berla.co

iVe Software v2.0.0

Release Date: May 2018

File Size: 459 MB

Notes for this Release:

The release of iVe 2.0 is more than just a software release, it is a user driven monumental move forward and brings investigators at all levels into the world of vehicle forensics. Along with the 2.0 iVe Software release, we are also releasing version 2.0 of the Mobile app and announcing the new 2.0 hardware kit. Here are the highlights for each of the tools in the ecosystem.

This .zip file contains all of the prerequisites, drivers and main application, and requires a valid, up-to-date license to decrypt the download file.

iVe Software v2.1

This release introduces support for a considerable number of Nissan and INFINITI vehicles manufactured from 2008 to 2017, as well as select Volkswagen vehicles dating back to 2010.

This release also brings some new features and improvements by customer request. The ‘Search’ section, which was radically revamped and improved in the iVe 2.0 release, has received a few refinements and tweaks to make it even sharper.

Between iVe 2.0 and 2.1 several changes have been implemented to improve data parsing in various supported systems. Several minor bug fixes and user interface improvements round out the release.

This .zip file contains all of the prerequisites, drivers and main application, and requires a valid, up-to-date license to decrypt the download file.

iVe Software v2.0.3

Release Date: September 2018

File Size: 459 MB

Notes for this Release:

Version 2.0.3 includes a change for tracklog parsing in some newer Ford SYNC generation 3 systems. This is the lone change included in iVe version 2.0.3, but it can prove a significant one for investigations involving some newer Ford vehicles.

It is recommended that users update to the new version in order to fully take advantage of the above improvement.

This .zip file contains all of the prerequisites, drivers and main application, and requires a valid, up-to-date license to decrypt the download file.